Login

RHEL 7 : qemu-kvm-rhev (RHSA-2016:0084)

High Nessus Plugin ID 117310

Synopsis

The remote Red Hat host is missing one or more security updates.

Description

Updated qemu-kvm-rhev packages that fix two security issues and threebugs are now available for Red Hat Enterprise Virtualization.Red Hat Product Security has rated this update as having Importantsecurity impact. Common Vulnerability Scoring System (CVSS) basescores, which give detailed severity ratings, are available for eachvulnerability from the CVE links in the References section.KVM (Kernel-based Virtual Machine) is a full virtualization solutionfor Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev packageprovides the user-space component for running virtual machines usingKVM.A use-after-free flaw was found in the way QEMU's IDE AHCI emulatorprocessed certain AHCI Native Command Queuing (NCQ) AIO commands. Aprivileged guest user could use this flaw to crash the QEMU processinstance or, potentially, execute arbitrary code on the host withprivileges of the QEMU process. (CVE-2016-1568)An out-of-bounds read/write flaw was discovered in the way QEMU'sFirmware Configuration device emulation processed certain firmwareconfigurations. A privileged (CAP_SYS_RAWIO) guest user could use thisflaw to crash the QEMU process instance or, potentially, executearbitrary code on the host with privileges of the QEMU process.(CVE-2016-1714)Red Hat would like to thank Qinghao Tang of Qihoo 360 Marvel Team forreporting the CVE-2016-1568 issue, and Donghai Zhu of Alibaba forreporting the CVE-2016-1714 issue.This update also fixes the following bugs :* Incorrect handling of the last sector of an image file could triggeran assertion failure in qemu-img. This update changes the handling ofthe last sector, and no assertion failure occurs. (BZ#1299345)* Previously, rebooting a guest after multiple memory hot-plugs insome cases caused the qemu-kvm process to terminate unexpectedly, andthe reboot to fail. This update fixes the problem, and guests withhot-plugged memory reboot successfully. (BZ#1288096)* When the OHCI driver received an interrupt during the suspendingprocess, the interrupt was not acknowledged. As a consequence, theinterrupt kept being sent repeatedly, and the system becameunresponsive. This update modifies the suspend procedure toacknowledge the interrupt, which prevents the described problem.(BZ#1298971)All qemu-kvm-rhev users are advised to upgrade to these updatedpackages, which contain backported patches to correct these issues.After installing this update, shut down all running virtual machines.Once all virtual machines have shut down, start them again for thisupdate to take effect.